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Top Stories 

• Officials said June 4 that a contractor who dumped a massive pile of dirt over several years 
next to an Interstate 495 bridge in Delaware may have caused the ground to shift 
underneath the bridge, causing structural columns to tilt, and prompting officials to shut the 
bridge down indefinitely. - Associated Press (See item 10) 

• A security researcher identified a remotely exploitable vulnerability in all versions of 
OpenSSL that could be used in a man-in-the-middle (MitM) attack to decrypt traffic 
between vulnerable clients and servers. - Threatpost (See item 24 ) 

• A 5-alarm fire broke out June 5 at an apartment building in New York City’s Staten Island, 
injuring at least 34 people, including 23 firefighters. - WNBC 4 New York City (See item 
26 ) 

• Police are investigating after up to four suspects broke into Gold Dimensions in Puyallup, 
Washington, June 1, cut through a wall behind the store’s safe, and stole nearly $1 million 
in jewelry. - KING 5 Seattle (See item 30) 
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Energy Sector 



1. June 3, Baton Rouge Advocate - (Louisiana) Audit: State regulation of wells 
inadequate. An audit released June 2 by the Louisiana Legislative Auditor’s Office 
determined that the Louisiana Department of Natural Resources Office of Conservation 
was mismanaging oil and gas regulations after an investigation found that over half the 
oil and gas wells in the State were not inspected within a 3-year guideline set by the 
State, and more than 2,800 orphaned wells had not be plugged as of July 2013, among 
other findings. 

Source: http://theadvocate.com/home/9342671-125/audit-state-regulation-of-wells 

[ Return to top ] 

Chemical Industry Sector 

2. June 5, Baton Rouge Advocate - (Louisiana) No injuries reported in fire at Westlake 
Chemical. A fire broke out June 4 inside a refrigeration unit that stores organic 
peroxide at the Westlake Chemical Corporation’s facility in Ascension Parish, 
prompting company officials to shut down a polyvinyl chloride (PVC) unit as a 
precaution. No injuries were reported and the Louisiana Department of Environmental 
Quality stated that air quality tests revealed no emission levels that were harmful to 
human health. 

Source: http://theadvocate.com/home/9362826-125/fire-at-westlake-chemical-causes 
For another story, see item 15 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 



3. June 5, Help Net Security - (California) American Express credit card data exposed. 
American Express announced June 2 that over 76,000 cardholders in California may 
have had their payment card information disclosed in a batch of payment card 
information exposed by a hacktivist group in March. Many of the cards in the larger 
March breach appeared to come from older leaks and not from a new breach. 

Source: http://www.net-securitv.org/article.php?id=2034 

4. June 5, WYFF 4 Greenville - (South Carolina; Florida) Secret Service: Men recruited 
to set up ATM skimmers in Greenville. Police in Greenville, South Carolina, arrested 
two men who arrived in the area May 3 1 and were suspected of installing ATM 
skimming devices to collect payment card data from bank ATMs in Greenville and 
Spartanburg. The men admitted during an interview with U.S. Secret Service agents to 
being given a list of locations to target by a man from Miami who instructed them to 
place skimmers and pinhole cameras on the listed ATMs. 

Source: http://www.wvff4.com/news/secret-service-men-recruited-to-set-up-atm- 
skimmers-in-greenville/26342786 

5. June 4, Bloomberg News - (International) Ex-ConvergEx trader charged with fraud 
over trade markups. A Bermuda-based former ex-ConvergEx trader appeared before 
a judge in New Jersey June 4 after being indicted for allegedly making false reports 
with fabricated details about trades, causing ConvergEx clients to lose over $5.1 
million. 

Source: http://www.bloomberg.com/news/2014-06-Q4/ex-convergex-trader-charged- 
with-fraud-over-trade-markups.html 

6. June 4, WCBS 2 New York City - (New York) FBI: ‘Gatsby Bandit’ arrested, 
charged in Manhattan bank robbery. FBI agents arrested a suspect known as the 
“Gatsby Bandit” June 3 and charged him with the robbery of an HSBC Bank branch 
May 27 in New York City. The suspect is also believed to be connected to three other 
bank robberies in the Queens area of the city. 

Source: http://newvork.cbslocal.com/2014/06/04/fbi-gatsby-bandit-arrested-charged-in- 
manhattan-bank-robbery/ 

[ Return to top ] 

Transportation Systems Sector 

7. June 5, Annapolis Capital - (Maryland) Route 50 east reopened in Annapolis after 
sinkhole repairs. Eastbound Route 50 at Aris T. Allen Boulevard in Annapolis 
reopened June 5 after repairs took 9 hours when heavy rains caused a 24-inch 
corrugated metal pipe to collapse beneath the road, creating a sinkhole June 4. 

Source: http://www.capitalgazette.com/news/for the record/sinkhole-opens-on-route- 
road-closed-for-evening-commute/article 97 65 66b7 -7 1 a 1 -5a25 - 8 8ca- 
918f7847el6a.html 
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8. June 5, Next gov - (National) Flaw lets hackers control electronic highway 
billboards. The U.S. Department of Homeland Security advised transportation 
operators June 4 of a hard-coded password vulnerability discovered in Daktronics 
Vanguard highway notification sign configuration software which could allow hackers 
to gain unauthorized access to the highway signs. The vendor was notified and is 
working to fix the issue. 

Source: http://www.nextgov.com/cvbersecuritv/2014/06/flaw-lets-hackers-control- 
electronic-highway-billboards/85849/ 

9. June 4, Access North Georgia - (Georgia) One killed in Hwy. 316 wreck. Highway 
316 in Barrow County, Georgia, was closed in both directions between Patrick Mill 
Road and Carl Bethlehem Road for more than 8 hours June 4 after two consecutive 
accidents on eastbound and westbound lanes that left one person dead and another 
injured. 

Source: http://www.accessnorthga.corn/detail.php?n=275687 

10. June 4, Associated Press - (Delaware) Massive dirt pile may have led to bridge 
closure. Officials said June 4 that a contractor who dumped a massive pile of dirt about 
two stories high and 100 yards long over several years next to an Interstate 495 bridge 
in Delaware may have caused the ground to shift underneath the bridge, causing four 
structural columns to tilt and prompting officials to shut the bridge down indefinitely 
until repairs can be made. 

Source: http://www.seattlepi.com/news/us/article/Crucial-East-Coast-highway-bridge- 
remains-closed-5527088.php 

11. June 4, WJLA 7 Washington, D.C. - (Virginia) Three northern Va. residents killed, 
one injured in deadly 1-81 crash. Southbound Interstate 81 in Washington County, 
Virginia, was shut down for about 3 hours June 3 after a car crashed into a parked 
semi-truck on the side of the road, killing three passengers and sending a fourth to a 
local hospital for injuries. 

Source: http://www.wila.com/articles/2014/06/three-northem-va-residents-killed-one- 
iniured-in-deadly-i-81-crash-103789.html 
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Food and Agriculture Sector 

12. June 4, Associated Press - (Washington) Washington’s Wilcox Farms cited for fatal 
silo accident. The Washington Department of Labor & Industries cited Wilcox Farms 
Feedmill, Inc., for several safety violations following an inspection that was initiated 
after a worker was buried under tons of spilled corn and died when a grain silo 
collapsed on a Roy, Washington farm in December 2013. Proposed penalties totaled 
$67,000. 

Source: http://seattle.cbslocal.com/2014/06/04/wilcox-farms-cited-for-fatal-silo- 
accident/ 

13. June 4, U.S Food and Drug Administration - (National) Ocean Spray voluntarily 
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recalls limited quantity of 8-ounce Greek Yogurt Covered Craisins® Dried 
Cranberries which may contain undeclared peanuts. Ocean Spray voluntarily issued 
a recall for 8-ounce packages of its Ocean Spray Greek Yogurt Covered Craisins Dried 
Cranberries due to the potential that the products may contain undeclared peanuts. 
Source: http://www.fda.gov/Safetv/Recalls/ucm399945.htm 

14. June 4, U.S. Food and Drug Administration - (National) Health Matters America, 
Inc, recalls Organic Sprouted Chia Seed Powder and Sprouted Chia/flax Seed 
Powder due to possible health risk. Health Matters America, Inc., voluntarily recalled 
its Organic Traditions Sprouted Chia Seed Powder and Sprouted Chia/Flax Seed 
Powder products due to possible Salmonella contamination. The products were sold in 
8-ounce, 16-ounce, and 50 pound packages and were sold to distributors, retailers, and 
via Internet sales in several States. 

Source: http://www.fda.gov/Safety/Recalls/ucm399894.html 
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Water and Wastewater Systems Sector 

15. June 5, Towanda Daily Review - (Pennsylvania) Chemical spill reported at GTP 
causes restriction on boat travel on Susquehanna River. Boating and river traffic 
between the Hornbrook Park river access in Seshequin Township and the Wysox river 
access was restricted for 24 hours by authorities after approximately 100 gallons of 
solvent spilled into the Susquehanna River from Global Tungsten & Powders Corp., in 
Towanda. A power outage prompted a tank to overflow and spill the solvent. 

Source: http://thedailyreview.com/news/chemical-spill-reported-at-gtp-causes- 
restriction-on-boat-travel-on-susquehanna-river- 1 . 1 698098 

16. June 4, WGHP 8 High Point - (North Carolina) 15,000 gallons of untreated waste 
water spill in Greensboro. Greensboro officials reported that an estimated 15,000 
gallons of untreated wastewater spilled into North Buffalo Creek in Greensboro June 3 
after a tree collapsed and hit a section of pipeline, causing the wastewater to flood for 
over 2 hours. The pipeline was replaced and several fire hydrants were opened to help 
clear the spill. 

Source: http://mvfox8.com/2014/06/04/15000-gallons-of-untreated-wastewater-spill-in- 
greensboro/ 

For another story, see item 32 
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Healthcare and Public Health Sector 

Nothing to report 
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Government Facilities Sector 



17. June 5, CNN - (California) Navy jet crashes into Pacific on approach to carrier. The 

pilot of a U.S. Navy fighter jet ejected and was safely recovered after an F/A-18E 
Super Hornet jet crashed into the Pacific Ocean near southern California while 
approaching the USS Carl Vinson June 4. All operations on the aircraft carrier were 
suspended indefinitely. 

Source: http://www.cnn.com/2014/06/05/us/california-navv-iet-crash/index.html 

18. June 5, Associated Press - (California) Military jet crashes in California 
neighborhood. The pilot of a U.S. Marine Corps jet safely ejected before a Harrier 
AV-8B jet crashed into a residential area and destroyed two homes in Imperial, 
California, June 4. The plane was based in Marine Corps Air Station Yuma in Arizona. 
Source: http://www.washingtonpost.com/national/militarv-iet-crashes-in-california- 
neighborhood/20 1 4/06/04/672667 1 c-ec4f- 1 1 e3 -b 1 Qe-5090cf3b5 95 8 story.html 

19. June 4, St. Paul Pioneer Press - (Minnesota) St. Paul Central High School cancels 
classes, no makeup day scheduled. Classes were cancelled at St. Paul Central High 
School in Minnesota June 4 due to a power outage. Service was restored to the building 
after nearly 2 hours. 

Source: http://www.twincities.com/education/ci 25894958/st-paul-central-high-school- 
cancels-classes-power 

20. June 4, Macomb Daily - (Michigan) Power outage closes two government buildings 
in Mount Clemens. Macomb County’s Talmer Building and the Clemens Center 
building were closed June 3 due to a power outage caused by a fallen utility pole. 
Source: http://www.macombdaily.com/general-news/20140603/power-outage-closes- 
two-government-buildings-in-mount-clemens 

21. June 4, WKBT 8 La Crosse - (Wisconsin) School buses pulled off road for missing 
brake sensor. Durham School Services in Wisconsin is investigating after seven 
Minnesota City Bus Service school buses were pulled out of service the week of May 
26 when authorities learned the buses were missing their brake sensors. Police found 
that the sensors were tampered with and reinstalled to appear as though they were in 
their original condition. 

Source: http://www.news8000.com/news/school-buses-pulled-off-road-for-missing- 
brake- sensor/263 13650 

22. June 4, Hanover Evening Sun - (Pennsylvania) Update on Wednesday’s bus crash in 
Upper Adams school district. Eleven Bendersville Elementary School students were 
transported to an area hospital for minor injuries after their school bus hit the back of a 
car in Bendersville Borough June 4. 

Source: http://www.eveningsun.com/local/ci 25896589/police-investigate-bus-crash- 
bendersville 
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Emergency Services Sector 



23. June 4, Charleston Daily Mail - (West Virginia) Six charged in riot at detention 
center. Six teenagers were charged for their involvement in a February riot at the 
Lome Yeager Jr. Juvenile Center in Parkersburg after two teens began assaulting 
correctional officers and four others became involved, escalating violence against staff 
members. 

Source: http://www.chaiiestondailvmail.com/article/20140604/DM02/140609664/1276 
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Information Technology Sector 

24. June 5, Threatpost - (International) New OpenSSL MitM flaw affects all clients, 
some server versions. A security researcher identified a remotely exploitable 
vulnerability in all versions of OpenSSL that could be used in a man-in-the-middle 
(MitM) attack to decrypt traffic between vulnerable clients and servers. The researcher 
reported that the vulnerability appears to have existed in OpenSSL’s code since 1998 
Source: http://threatpost.com/new-openssl-mitm-flaw-affects-all-clients-some-server- 
versions 

25. June 5, Softpedia - (International) Skype users face security risk due to unencrypted 
data. Solutionary researchers reported in the company’s May Threat Report that Skype 
users’ personal information and chat transcripts could be vulnerable to attackers due to 
the data being kept in an unencrypted file on the local system in Windows and Linux. 
The files are hidden by default but could easily be found by an attacker. 

Source: http://news.softpedia.com/news/Skvpe-Users-Face-Securitv-Risk-Due- 
to-Unencrypted-Data-4454 1 4.shtml 

For another story, see item 8 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 



26. June 5, WNBC 4 New York City - (New York) Father throws kids out window to 
escape Staten Island blaze; 34 hurt: FDNY. A 5-alarm fire broke out June 5 at an 
apartment building in the Rosebank neighborhood of New York City’s Staten Island, 
injuring at least 34 people, including 23 firefighters. The cause of the fire that rendered 
the 5-unit building uninhabitable is under investigation. 

Source: http://www.nbcnewyork.com/news/local/Fire-Rosebank-Staten-Island-4- 
Alarm-Injuries-26 1933 161 .html 

27. June 5, WKRN 2 Nashville - (Tennessee) 2-alarm fire destroys church near 
Nashville airport. Firefighters responded to a 2-alarm fire at the Trinity Church of the 
Nazarene in Nashville June 5 after a suspected lightning strike sparked the blaze which 
caused extensive damage to the structure’s roof. 

Source: http://www.wkrn.com/story/25698867/church-catches-fire-near-nashville- 
airport 

28. June 5, WXIA 11 Atlanta - (Georgia) Fire damages DeKalb County hotel. Authorities 
are investigating the cause of a fire that broke out at a Quality Inn hotel in DeKalb 
County June 4 and prompted the evacuation of 55 people from the hotel. 

Source: http://www.llalive.com/storv/news/local/tucker/2014/06/05/qualitv-inn- 
northlake-fire/10001043/ 

29. June 4, Asbury Park Press - (New Jersey) Bomb threats lead to searches at 
Walmart, Kmart. Customers and employees inside three Walmart and Kmart stores in 
Monmouth and Ocean Counties were evacuated June 4 due to bomb threats that were 
phoned in to each location. Police searched and then cleared each store about 3 hours 
later when no explosive devices were found. 

Source: http://www.app.corn/storv/news/crime/2014/06/04/walmart-kmart- 
evacuate/9993229/ 

30. June 3, KING 5 Seattle - (Washington) "Professionals" steal $1 million in jewelry 
from Puyallup store. Police are investigating after up to four suspects broke into Gold 
Dimensions in Puyallup June 1, cut through a wall behind the store’s safe, and stole 
nearly $1 million in jewelry. 

Source: http://www.king5.com/news/local/Puyallup-iewelery-store-robbed-bv- 
professionals-261779001.html 
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Dams Sector 



31. June 4, WDSU 6 New Orleans - (Louisiana) Lafourche Parish declares state of 
emergency after levee breach. Lafourche Parish authorities declared a state of 
emergency June 2 after a levee was breached in the Belle Terre area of Choupic, likely 
due to water that infiltrated from a nearby swamp after heavy rains. Crews sandbagged 
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the weakened areas to stabilize the levee until officials are able to determine a solution 
to strengthen the levee against future incidents. 

Source: http://www.wdsu.com/news/local-news/new-orleans/lafourche-parish-declares- 
state-of-emergency- after- levee-breach/263 12636 

32. June 4, Denver Post - (Colorado) Chatfield Reservoir expansion approved by feds, 
will flood state park. Federal engineers approved the expansion of Chatfield Reservoir 
in Colorado which will re-allocate the reservoir to help supply an average of 2.8 billion 
gallons of water a year for industrial, environmental, municipal, and agricultural use in 
the Denver and Front Range communities. The project will submerge 10 percent of 
Chatfield State Park. 

Source: http://www.denverpost.com/environment/ci 25900035/chatfield-reservoir- 
expansion-approved-by-feds-will-flood 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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